Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
File:                     rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json)
Hash identifier:          2+WCr4NWEqtWAunYyGznE+6jWbfyE8P1ZE1e0kjxnkE=
Subject key identifier:   0D:2A:F2:3E:5F:07:84:B3:97:FB:E2:75:0B:93:76:F3:B4:ED:8C:08
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Certificate issuer:       /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial:       070D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
Manifest number:          0702
Signing time:             Tue 12 May 2026 22:08:42 +0000
Manifest this update:     Tue 12 May 2026 22:08:42 +0000
Manifest next update:     Tue 19 May 2026 22:08:42 +0000
Files and hashes:         1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: e5cgrCSD/xheVozTGonLlHMNAI6oF+4KSTs5f2O62zM=)
                          2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 1TSa0PPd+7pwYyolW0O6jfoDGRjZIL5Y7Dutt5Dic1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
                          rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Validity
            Not Before: May 12 22:08:42 2026 GMT
            Not After : May 19 22:08:42 2026 GMT
        Subject: CN=6a03a4ea-c499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:11:93:ae:16:7e:f3:6d:51:0b:32:38:c4:
                    36:4d:84:f6:49:11:bb:ce:55:6b:5f:b4:c4:97:8e:
                    08:42:94:b9:1c:73:a7:89:d8:6a:59:e7:34:f8:00:
                    8b:33:34:2c:1e:cf:72:bb:ac:19:b2:72:4d:0c:e7:
                    77:20:b1:b8:10:47:f4:69:68:39:a6:1a:1e:0f:19:
                    1f:15:62:c5:b1:6b:9b:b5:03:31:38:63:1b:fc:01:
                    cf:87:04:24:4b:74:2a:4f:f1:0a:46:13:69:3e:5e:
                    68:9f:c6:48:fa:7f:03:54:ff:a4:d8:df:91:e3:5e:
                    67:4b:25:30:6b:56:96:12:6a:58:fc:57:12:db:21:
                    33:80:25:64:9d:cd:b6:1b:98:da:0c:16:01:b7:7e:
                    41:70:4b:71:f2:35:60:8e:4d:1e:e8:ab:a7:b3:5c:
                    75:b5:e0:a3:51:2e:2b:52:cb:6d:b6:43:f8:87:30:
                    59:57:cf:f0:8b:36:bc:d1:9b:6d:8c:ee:c4:d7:8c:
                    88:80:0c:90:c8:73:38:69:05:bb:d3:94:a7:21:31:
                    37:e3:ee:e8:ea:e3:b7:63:d2:cd:bc:68:94:93:fb:
                    5a:83:35:d2:70:4d:60:c8:4a:78:d3:f7:0d:01:56:
                    f2:83:f8:5f:94:f3:60:4b:bd:3e:e0:4d:28:25:8e:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:F2:3E:5F:07:84:B3:97:FB:E2:75:0B:93:76:F3:B4:ED:8C:08
            X509v3 Authority Key Identifier:
                keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ed:f3:e5:6b:9e:6b:58:ce:12:ed:63:e6:31:ad:bf:56:c7:
         65:2e:68:8a:43:ac:f1:b9:e2:77:ab:97:97:c7:51:0b:94:33:
         1c:8d:2a:f2:d6:d1:40:e6:4a:9d:0e:2a:13:f9:8c:fc:6b:37:
         4b:d6:8b:ee:10:2b:8b:4b:01:99:bc:21:4d:73:43:e0:55:5e:
         6e:dd:ad:f0:de:e4:cf:5a:6b:ef:fd:d2:04:59:c8:2f:b2:6b:
         38:e4:47:b1:ea:a3:35:28:fc:57:84:f4:0d:6d:dd:fc:12:41:
         22:09:a2:7e:36:c5:09:d5:d2:e8:37:ce:2a:52:ba:27:d9:a7:
         7a:8d:27:4f:b9:73:08:72:6e:99:d5:d1:01:f6:66:57:cd:fa:
         74:16:a8:69:ed:52:fa:2c:a3:57:1b:6a:a6:25:15:a6:aa:20:
         b3:96:68:61:07:f9:21:ff:93:ea:1a:68:12:ff:bc:5f:87:34:
         fd:47:93:f7:16:36:45:45:2b:4e:34:d6:66:d1:ef:47:ae:b3:
         42:7d:d1:6a:28:aa:c3:f9:8a:d8:a6:f4:c9:ba:ed:cd:b3:2b:
         d9:58:e5:d2:08:b2:fb:fa:78:58:b2:48:76:0a:99:ac:ec:b4:
         47:8d:f7:3b:24:06:97:14:6b:a7:26:8d:0c:ba:f5:67:ef:5d:
         01:52:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:08 2026 by rpki-client